Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File: SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier: 095Aw2O7zAjZQTozIxxrLY9A12slNQZ1hsp1+bjRdBs=
Subject key identifier: BD:F1:E5:39:50:8A:D1:68:6F:99:44:48:23:15:5B:6A:9F:F2:55:61
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer: /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial: 019749314760C9BFE583965130433C7421D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number: 1420
Signing time: Sat 07 Jun 2025 07:00:55 +0000
Manifest this update: Sat 07 Jun 2025 07:00:55 +0000
Manifest next update: Sun 08 Jun 2025 07:00:55 +0000
Files and hashes: 1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: JTlqoIaASgm9c4HcILvlN8vYXeaMdikE7oaDaiJbCYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:47:60:c9:bf:e5:83:96:51:30:43:3c:74:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
Validity
Not Before: Jun 7 07:00:55 2025 GMT
Not After : Jun 8 07:00:55 2025 GMT
Subject: CN=bdf1e539508ad1686f99444823155b6a9ff25561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:14:44:3c:6a:b6:aa:7e:86:59:88:e8:30:
4d:9c:36:13:67:ed:19:44:52:ee:02:c1:80:70:5d:
8c:c5:30:73:7c:76:6a:42:84:a6:d8:a1:ea:24:49:
b2:c9:d4:ab:42:44:d9:c7:38:72:a1:d3:a4:40:00:
af:3e:67:48:95:62:fc:9a:dc:90:56:15:b0:8a:d7:
86:9c:f7:dd:74:9c:d1:40:28:ec:ad:88:dd:71:38:
15:f6:2b:40:6e:45:39:38:90:62:59:94:20:6b:69:
7a:a8:7b:d7:6e:9d:c6:9d:4e:b3:da:18:c6:90:23:
5e:34:5d:05:09:4b:21:db:77:90:eb:40:f0:8f:20:
5d:4c:07:9a:2d:e7:c7:23:59:fc:bf:7f:3a:ac:2c:
48:50:5a:ee:7c:96:74:f2:9d:f6:71:05:4a:79:8a:
da:6d:7c:d4:49:dc:dd:53:9c:3f:10:31:4b:a5:49:
4f:ac:28:7e:2c:30:35:9d:36:69:7e:45:52:ed:8f:
3e:18:46:e8:59:c9:0d:a2:36:fb:e6:7b:6e:bf:ed:
be:ac:75:ef:21:0f:a9:e9:dc:b8:89:bb:5e:8c:f5:
a2:2a:95:b3:f4:36:e6:6d:14:9a:3c:bd:dd:85:0d:
13:75:59:93:ee:a1:3d:fb:c7:4b:50:aa:f6:19:9f:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:E5:39:50:8A:D1:68:6F:99:44:48:23:15:5B:6A:9F:F2:55:61
X509v3 Authority Key Identifier:
keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c3:88:4d:ca:bb:11:10:20:b2:a2:f5:43:5e:6b:dd:c6:a0:
da:16:0b:64:1c:8f:bd:78:b9:33:c2:90:b5:c1:a1:e9:2d:47:
49:e9:ea:7c:2c:41:27:d2:4c:e2:70:51:52:f1:6d:21:0a:76:
0f:93:8b:d6:80:9e:26:fd:56:9b:e2:8c:32:43:1d:59:2d:44:
52:d7:3f:97:35:08:c7:72:63:a1:0a:ff:43:8b:de:de:db:c8:
eb:1a:3c:1d:fc:f2:fd:b0:40:d7:c1:3e:2d:86:43:1a:ab:00:
81:91:ed:18:1d:75:0a:b8:d6:01:43:ab:3f:c8:bc:b7:ab:ca:
b7:d5:1d:50:1d:99:78:a1:65:b2:ed:35:56:e0:d2:85:68:8f:
8e:c2:88:eb:49:62:07:b9:a1:ea:8e:80:a3:0e:d5:b5:0a:b4:
e0:c4:49:18:5f:00:97:5e:5a:a9:f3:50:ee:6d:42:59:08:ab:
1c:72:64:be:64:84:16:c3:5d:86:5f:29:2d:40:cb:08:9d:03:
dd:6c:58:6c:20:f7:06:17:8f:ba:e2:43:86:b4:36:f3:a6:e6:
19:5e:8e:e9:59:bb:57:fb:ff:3f:fe:0d:cf:bb:f2:b6:2d:8a:
53:29:de:f9:a0:1a:6b:b2:25:81:a0:71:cb:78:52:ba:56:df:
96:6c:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:56 2025 by rpki-client